need help

ok so basicly my brother loves messing with my computer when hes home for the weekend doing things like resetting my password adding hidden users so i decided to check since he was home last weekend and i saw a string in the registry that seems suspicios any idea if it was added or if its legit

the string is:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList

its called parents and its a "REG_DWORD"

and in case it matters my user name is "Compaq_Owner"

 

I don't know if this registry entry is legitimate or not (I don't have it on my system).

What I would recommend is that you set up a limited account for your brother, and do not give him access to the Administrator account.

For now I would just do a System Restore to the date before your brother's last visit.

 

problem is no matter how i set up my system he seems to find every vulnerability and seems to have found some way to reset my pass word without even being logged in

 

What Windows version do you have?

 

windows xp home i got the computer free from a fellow forum member here on major geeks

 

A user name of Compaq_Owner suggests that it was originally installed using a Compaq install disc.

Have you tried renaming the default Administrator account and adding a password to it?

SteadyState may be what you're looking for to foil your brother's messing.

 

well i renamed it as death but sometimes it still shows and Compaq_Owner in some system files and registrations

and i have a password on it and he keeps finding a way to reset it im starting messing with system users and finding certain things that might be from him but other seem like they might be part of the system the user names are


ASP_657886467
SUPPORT_388945a0
SUPPORT_fddfa904


the main one that bugs me is the asp one for their is no comment for it and it looks like its creations time corasponds with on of my bros home visits

 

He could be resetting or bypassing the password by booting from a CD or USB.

You may have to deal with this physically (no, not like that ), remove and stash the monitor cable, hard drive or the whole PC ... hey wait, can you password the BIOS?

Note, anything you do the first time he's back, he'll have an answer to the next time - do you two talk?

 

we email sumtimes and he calls but the flash drive is a possiblity the problem is i also use the same feature for testing os's off my flash drive so id rather not block that feature and the cd i doubt hes all flash drive and sd cards

 

Try using a BIOS power on password. They can be defeated, but are much harder than the standard Windows passwords that can be bypassed by several bootable CD's designed for such purposes. Please pardon as I didn't see satrow's while typing.